Red Hat Training

A Red Hat training course is available for Red Hat Enterprise Linux

17.2. Delegating Host Management

Hosts are delegated authority over other hosts through the host-add-managedby utility. This creates a managedby entry. Once the managedby entry is created, then the host can retrieve a keytab for the host over which it has delegated authority.
  1. Log in as the admin user.
    [root@server ~]# kinit admin
  2. Add the managedby entry. For example, this delegates authority over client2 to client1.
    [root@server ~]# ipa host-add-managedby
  3. Obtain a ticket as the host client1:
    [root@client1 ~]# kinit -kt /etc/krb5.keytab host/
  4. Retrieve a keytab for client2:
    [root@client1 ~]# ipa-getkeytab -s -k /tmp/client2.keytab -p host/
    Keytab successfully retrieved and stored in: /tmp/client2.keytab